Bug#833302: glibc: CVE-2016-5417: per-thread memory leak in __res_vinit with IPv6 nameservers

[Aurelien Jarno <aurelien@aurel32.net>]

control: reassign -1 libc6
control: severity 818178 important
control: forcemerge 818178 -1

On 2016-08-02 19:54, Salvatore Bonaccorso wrote:
> Source: glibc
> Version: 2.23-4
> Severity: important
> Tags: security upstream fixed-upstream
> Forwarded: https://sourceware.org/bugzilla/show_bug.cgi?id=19257
> 
> Hi,
> 
> the following vulnerability was published for glibc.
> 
> CVE-2016-5417[0]:
> per-thread memory leak in __res_vinit with IPv6 nameservers

Before being identified as a security issue, it has been reported as bug
#818178. Merging the bugs.

> If you fix the vulnerability please also make sure to include the
> CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

I have just added the CVE to the changelog in our git (2.24 branch) so
that it can be found later.

Aurelien
 
-- 
Aurelien Jarno                          GPG: 4096R/1DDD8C9B
aurelien@aurel32.net                 http://www.aurel32.net